{"id":"https://openalex.org/W7204482393","doi":"https://doi.org/10.1145/3832783.3834500","title":"Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source","display_name":"Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source","publication_year":2026,"publication_date":"2026-10-07","ids":{"openalex":"https://openalex.org/W7204482393","doi":"https://doi.org/10.1145/3832783.3834500"},"language":"en","primary_location":{"id":"doi:10.1145/3832783.3834500","doi":"https://doi.org/10.1145/3832783.3834500","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834500","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3832783.3834500?download=true","source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3832783.3834500?download=true","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148441945","display_name":"Jessica H\u00f6sl","orcid":"https://orcid.org/0009-0000-3000-9573","observed_orcids":["https://orcid.org/0009-0000-3000-9573"]},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jessica H\u00f6sl","raw_affiliation_strings":["Technical University of Munich, Munich, Germany"],"raw_orcid":"https://orcid.org/0009-0000-3000-9573","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018250017","display_name":"Benedikt Hofmann","orcid":"https://orcid.org/0000-0002-3905-5143","observed_orcids":["https://orcid.org/0000-0002-3905-5143"]},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Benedikt Hofmann","raw_affiliation_strings":["Siemens AG, Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0002-3905-5143","affiliations":[{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065650079","display_name":"Patrick St\u00f6ckle","orcid":"https://orcid.org/0000-0003-0193-5871","observed_orcids":["https://orcid.org/0000-0003-0193-5871"]},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Patrick St\u00f6ckle","raw_affiliation_strings":["Siemens AG, Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0193-5871","affiliations":[{"raw_affiliation_string":"Siemens AG, Munich, Germany","institution_ids":["https://openalex.org/I1325886976"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.60494452,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4104","last_page":"4115"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9570000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9570000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.010499999858438969,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dockerfile","display_name":"Dockerfile","score":0.8360000252723694},{"id":"https://openalex.org/keywords/container-security","display_name":"container security","score":0.8479999899864197},{"id":"https://openalex.org/keywords/security-misconfiguration","display_name":"security misconfiguration","score":0.8769999742507935},{"id":"https://openalex.org/keywords/technical-debt","display_name":"technical debt","score":0.6899999976158142},{"id":"https://openalex.org/keywords/inner-source","display_name":"inner source","score":0.7459999918937683},{"id":"https://openalex.org/keywords/semantic-clustering","display_name":"semantic clustering","score":0.8889999985694885},{"id":"https://openalex.org/keywords/reference-materials","display_name":"reference materials","score":0.5720000267028809},{"id":"https://openalex.org/keywords/enterprise-software","display_name":"enterprise software","score":0.4950000047683716},{"id":"https://openalex.org/keywords/containerization","display_name":"containerization","score":0.6480000019073486},{"id":"https://openalex.org/keywords/automated-security-analysis","display_name":"automated security analysis","score":0.3840000033378601}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8138999938964844},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5935999751091003},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.5676000118255615},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.5636000037193298},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5586000084877014},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.42570000886917114},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.4140999913215637},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3977000117301941},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3882000148296356},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.36550000309944153},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3515999913215637},{"id":"https://openalex.org/C4438859","wikidata":"https://www.wikidata.org/wiki/Q186117","display_name":"Timeline","level":2,"score":0.350600004196167},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.33889999985694885},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3370000123977661},{"id":"https://openalex.org/C2776362682","wikidata":"https://www.wikidata.org/wiki/Q568494","display_name":"Single sign-on","level":3,"score":0.335999995470047},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3301999866962433},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.3262999951839447},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.3255999982357025},{"id":"https://openalex.org/C2778775528","wikidata":"https://www.wikidata.org/wiki/Q5135432","display_name":"Closing (real estate)","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.3165999948978424},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.30489999055862427},{"id":"https://openalex.org/C67936045","wikidata":"https://www.wikidata.org/wiki/Q681263","display_name":"Open standard","level":3,"score":0.2928999960422516},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28630000352859497},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26989999413490295},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.2678000032901764},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C27295321","wikidata":"https://www.wikidata.org/wiki/Q831795","display_name":"Enterprise information system","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C164614171","wikidata":"https://www.wikidata.org/wiki/Q5204775","display_name":"DECIPHER","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C185765463","wikidata":"https://www.wikidata.org/wiki/Q1318054","display_name":"Enterprise software","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2567000091075897}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3832783.3834500","doi":"https://doi.org/10.1145/3832783.3834500","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834500","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3832783.3834500?download=true","source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2608.25793","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25793","pdf_url":"https://arxiv.org/pdf/2608.25793","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.25793","doi":"https://doi.org/10.48550/arxiv.2608.25793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.25793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3832783.3834500","doi":"https://doi.org/10.1145/3832783.3834500","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834500","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3832783.3834500?download=true","source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204482393.pdf","grobid_xml":"https://content.openalex.org/works/W7204482393.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W151377110","https://openalex.org/W2605856244","https://openalex.org/W3006548806","https://openalex.org/W3095937739","https://openalex.org/W3136439925","https://openalex.org/W4206054126","https://openalex.org/W4286331355","https://openalex.org/W4286331454","https://openalex.org/W4383334282","https://openalex.org/W4385380399","https://openalex.org/W4389544167","https://openalex.org/W4389989017","https://openalex.org/W4394745203","https://openalex.org/W4400386317","https://openalex.org/W4409670786","https://openalex.org/W4411271237","https://openalex.org/W4411271286","https://openalex.org/W4411552880","https://openalex.org/W4412823699"],"related_works":["https://openalex.org/W6908680323","https://openalex.org/W4417447795","https://openalex.org/W7213898586","https://openalex.org/W7124449258","https://openalex.org/W7167262406","https://openalex.org/W4389544167","https://openalex.org/W3007480145","https://openalex.org/W4367021152","https://openalex.org/W4290988977","https://openalex.org/W4400386317"],"abstract_inverted_index":{"Containerization":[0],"dominates":[1],"enterprise":[2],"software":[3],"delivery,":[4],"yet":[5],"Dockerfiles":[6],"that":[7],"assemble":[8],"container":[9],"images":[10],"frequently":[11],"harbor":[12],"security":[13],"misconfigurations":[14],"and":[15,31],"structural":[16],"technical":[17],"debt.":[18],"This":[19],"problem":[20],"is":[21],"poorly":[22],"understood":[23],"in":[24],"corporate":[25],"inner-source":[26],"environments,":[27],"where":[28],"proprietary":[29],"context":[30],"isolated":[32],"governance":[33],"prevent":[34],"direct":[35],"application":[36],"of":[37],"open-source":[38],"findings.":[39]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-28T00:00:00"}